https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T16:01:54.864428+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2026-33928 cnvd-2026-33928 2026-10-06T16:01:55.123733+00:00 cnvd-2026-33928 https://vulnerability.circl.lu/vuln/fkie_cve-2026-19697 fkie_cve-2026-19697 2026-10-06T16:01:55.123810+00:00

The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables, allowing users with the file upload capability, such as Author, to upload a malicious SVG and perform Stored Cross-Site Scripting attacks against any user opening it, including administrators.

 https://vulnerability.circl.lu/vuln/ghsa-wx8r-3g94-mv2j GHSA-wx8r-3g94-mv2j 2026-10-06T16:01:55.123875+00:00

The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables, allowing users with the file upload capability, such as Author, to upload a malicious SVG and perform Stored Cross-Site Scripting attacks against any user opening it, including administrators.